Remove ypbind rules from RHEL10

ComplianceAsCode · Oct 2, 2024 · c516a1a · c516a1a
1 parent 00ac2b4
commit c516a1a
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 2 deletions.
diff --git a/controls/cis_rhel10.yml b/controls/cis_rhel10.yml
@@ -1046,8 +1046,7 @@ controls:
       - l1_server
       - l1_workstation
     status: automated
-    notes: Review the availability of this package when the product is out.
-    rules:
+    related_rules:
       - package_ypbind_removed
 
   - id: 2.2.4

diff --git a/products/rhel10/profiles/anssi_bp28_enhanced.profile b/products/rhel10/profiles/anssi_bp28_enhanced.profile
@@ -66,6 +66,7 @@ selections:
     - '!package_sendmail_removed'
     - '!package_talk_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'

diff --git a/products/rhel10/profiles/anssi_bp28_high.profile b/products/rhel10/profiles/anssi_bp28_high.profile
@@ -70,6 +70,7 @@ selections:
     - '!package_sendmail_removed'
     - '!package_talk_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'

diff --git a/products/rhel10/profiles/anssi_bp28_intermediary.profile b/products/rhel10/profiles/anssi_bp28_intermediary.profile
@@ -46,6 +46,7 @@ selections:
     - '!package_sendmail_removed'
     - '!package_talk_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'

diff --git a/products/rhel10/profiles/anssi_bp28_minimal.profile b/products/rhel10/profiles/anssi_bp28_minimal.profile
@@ -44,6 +44,7 @@ selections:
     - '!package_sendmail_removed'
     - '!package_talk_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing then temporarily until they are fixed
     - '!accounts_password_pam_retry'
diff --git a/products/rhel10/profiles/hipaa.profile b/products/rhel10/profiles/hipaa.profile
@@ -32,6 +32,7 @@ selections:
     - '!ensure_fedora_gpgkey_installed'
     - '!grub2_uefi_admin_username'
     - '!grub2_uefi_pass'
+    - '!service_ypbind_disabled'
     - '!service_zebra_disabled'
     - '!package_talk-server_removed'
     - '!package_talk_removed'
@@ -46,6 +47,7 @@ selections:
     - '!package_rsh_removed'
     - '!package_rsh-server_removed'
     - '!package_tcp_wrappers_removed'
+    - '!package_ypbind_removed'
     - '!package_xinetd_removed'
     - '!service_xinetd_disabled'
     - '!sshd_allow_only_protocol2'